$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft File: 8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft (raw, json) Hash identifier: LRyCE6eiLoTppS5K0diPn/RaaFGkZ2N0STO9yPPhW0s= Subject key identifier: 61:28:39:F7:7A:6E:F0:D1:2E:B1:87:B0:6B:7E:E9:56:F5:09:08:E3 Authority key identifier: F0:5B:BD:26:D4:DE:08:F6:58:8C:B7:FA:FF:B1:83:0F:AB:C3:71:67 Certificate issuer: /CN=A912FBD5/serialNumber=F05BBD26D4DE08F6588CB7FAFFB1830FABC37167 Certificate serial: 0657 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft Manifest number: 0652 Signing time: Mon 30 Jun 2025 22:54:15 +0000 Manifest this update: Mon 30 Jun 2025 22:54:15 +0000 Manifest next update: Mon 07 Jul 2025 22:54:15 +0000 Files and hashes: 1: 8Fu9JtTeCPZYjLf6_7GDD6vDcWc.crl (hash: 9q1U98uclgl+EIxsBCiF4hdOGrbXu/4w/Ha22ejfNg4=) 2: C0D6C00E8E5511EBA9EA9977C4F9AE02.roa (hash: eq7ObcirvoR6TZzb3RsSpe6IDa+SDjtPX6j3VgoghJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.crl rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1623 (0x657) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBD5, serialNumber=F05BBD26D4DE08F6588CB7FAFFB1830FABC37167 Validity Not Before: Jun 30 22:54:15 2025 GMT Not After : Jul 7 22:54:15 2025 GMT Subject: CN=68631597-0b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:53:9a:ca:c3:1b:69:8e:be:c3:52:19:8f:15: c6:f0:a4:67:2d:87:97:ff:e5:ea:05:df:e8:ef:ad: 84:3b:f6:39:77:f6:31:dd:db:9b:6f:19:67:fd:89: 4f:02:69:dd:f2:26:c0:f0:c2:e4:80:b7:c9:2f:93: 9e:94:80:33:31:bb:9d:04:27:3c:0d:27:e3:a4:e7: 12:0b:92:ed:ba:11:f8:ab:c9:71:84:78:96:d4:80: ec:06:d8:4a:d4:9f:9c:80:74:ee:c7:4a:0a:d1:c2: 77:17:cb:1b:ee:93:ff:a2:f4:24:fb:17:8f:09:f7: 38:82:ba:e6:84:97:26:09:15:c4:91:b5:52:e5:2f: 85:f3:14:8e:69:a3:fb:f3:d8:81:29:9d:ee:e7:f0: 92:5c:b4:7e:df:44:17:ff:c7:9d:09:df:9f:b4:9e: 0e:52:16:7e:ef:f2:56:a4:84:39:4d:12:94:0a:bb: d9:b6:8d:09:1a:c4:2a:95:1a:ec:cc:7f:46:c3:36: af:18:3a:20:9c:82:e6:15:54:38:cc:d9:b0:c0:ef: 9c:71:ad:a0:11:4a:63:35:dc:1a:8a:1c:aa:46:65: a6:bf:d4:5a:37:cb:07:88:75:0e:01:f0:08:f4:29: 94:ad:ba:19:fa:a7:c0:53:b3:43:75:0d:50:29:5f: e7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:28:39:F7:7A:6E:F0:D1:2E:B1:87:B0:6B:7E:E9:56:F5:09:08:E3 X509v3 Authority Key Identifier: keyid:F0:5B:BD:26:D4:DE:08:F6:58:8C:B7:FA:FF:B1:83:0F:AB:C3:71:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d0:e1:0f:c1:43:a0:df:7f:06:a8:46:e1:06:6c:b2:ef:53: ab:58:b9:bb:ca:0d:65:41:b8:d5:cc:53:0f:c5:67:d9:63:ca: 00:78:69:09:ea:84:3a:64:45:14:3c:0c:2c:5b:47:07:fc:8c: 72:bb:00:99:60:65:55:4b:eb:f6:ad:37:eb:e0:eb:5b:56:01: 0c:15:43:61:2a:05:3e:49:8d:4e:43:64:d1:3b:b1:55:f1:2b: 57:5a:76:87:9c:e6:c8:8e:b7:a4:c0:42:0f:5f:7d:c7:66:db: 51:91:3d:c6:c5:eb:9e:73:1c:c3:4b:28:0c:c3:ef:88:ef:4c: 05:85:30:90:b0:3d:14:75:e7:05:d6:8d:96:c5:62:69:45:78: 00:a2:55:1b:42:60:70:aa:98:00:b0:a4:50:de:ee:ea:3c:6c: b4:ae:6d:a6:69:39:a6:d0:2f:69:6b:9c:1b:74:3b:37:c2:c8: 07:f8:e8:b3:96:e3:dc:2d:c8:93:0d:e3:35:ff:30:eb:9a:ee: 90:00:e7:a1:85:5e:92:5a:f5:c8:b9:de:c0:57:d5:6a:83:b7: 15:9f:50:31:42:82:2f:91:7d:c7:7d:52:56:f3:c1:b0:89:9a: 24:b3:ba:3c:ef:1e:de:d3:25:54:00:be:f0:ed:0a:5a:df:17: 39:ae:54:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCRDUxMTAvBgNVBAUTKEYwNUJCRDI2RDRERTA4RjY1ODhDQjdGQUZGQjE4MzBG QUJDMzcxNjcwHhcNMjUwNjMwMjI1NDE1WhcNMjUwNzA3MjI1NDE1WjAYMRYwFAYD VQQDEw02ODYzMTU5Ny0wYjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApVOaysMbaY6+w1IZjxXG8KRnLYeX/+XqBd/o762EO/Y5d/Yx3dubbxln/YlP Amnd8ibA8MLkgLfJL5OelIAzMbudBCc8DSfjpOcSC5LtuhH4q8lxhHiW1IDsBthK 1J+cgHTux0oK0cJ3F8sb7pP/ovQk+xePCfc4grrmhJcmCRXEkbVS5S+F8xSOaaP7 89iBKZ3u5/CSXLR+30QX/8edCd+ftJ4OUhZ+7/JWpIQ5TRKUCrvZto0JGsQqlRrs zH9GwzavGDognILmFVQ4zNmwwO+cca2gEUpjNdwaihyqRmWmv9RaN8sHiHUOAfAI 9CmUrboZ+qfAU7NDdQ1QKV/nvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGEoOfd6 bvDRLrGHsGt+6Vb1CQjjMB8GA1UdIwQYMBaAFPBbvSbU3gj2WIy3+v+xgw+rw3Fn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJENS8wRDI2RDRBMDhF NTQxMUVCOTMzMDhBNzVDNEY5QUUwMi84RnU5SnRUZUNQWllqTGY2XzdHREQ2dkRj V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhGdTlKdFRlQ1BaWWpMZjZfN0dERDZ2RGNXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJENS8wRDI2RDRBMDhFNTQxMUVCOTMzMDhBNzVDNEY5QUUwMi84RnU5SnRUZUNQ WllqTGY2XzdHREQ2dkRjV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL0OEPwUOg338GqEbhBmyy71OrWLm7yg1lQbjVzFMPxWfZY8oAeGkJ 6oQ6ZEUUPAwsW0cH/IxyuwCZYGVVS+v2rTfr4OtbVgEMFUNhKgU+SY1OQ2TRO7FV 8StXWnaHnObIjrekwEIPX33HZttRkT3GxeuecxzDSygMw++I70wFhTCQsD0UdecF 1o2WxWJpRXgAolUbQmBwqpgAsKRQ3u7qPGy0rm2maTmm0C9pa5wbdDs3wsgH+Oiz luPcLciTDeM1/zDrmu6QAOehhV6SWvXIud7AV9Vqg7cVn1AxQoIvkX3HfVJW88Gw iZoks7o87x7e0yVUAL7w7Qpa3xc5rlTC -----END CERTIFICATE-----Generated at Wed Jul 2 12:50:58 2025 by rpki-client